Oracle Warns of Critical Remotely Exploitable Weblogic Server Flaws

Blog WriterThe Hacker News - Original news source is thehackernews.com

Oracle on Tuesday released its quarterly Critical Patch Update for July 2021 with 342 fixes spanning across multiple products, some of which could be exploited by a remote attacker to take control of an affected system. Chief among them is CVE-2019-2729, a critical …

Another Hacker Arrested for 2020 Twitter Hack and Massive Bitcoin Scam

Blog WriterThe Hacker News - Original news source is thehackernews.com

A U.K. citizen has been arrested in the Spanish town of Estepona over his alleged involvement in the July 2020 hack of Twitter, resulting in the compromise of 130 high-profile accounts. Joseph O’Connor, 22, has been charged with intentionally accessing a computer …

Malicious NPM Package Caught Stealing Users’ Saved Passwords From Browsers

Blog WriterThe Hacker News - Original news source is thehackernews.com

A software package available from the official NPM repository has been revealed to be actually a front for a tool that’s designed to steal saved passwords from the Chrome web browser. The package in question, named “nodejs_net_server” and downloaded over …

XLoader Windows InfoStealer Malware Now Upgraded to Attack macOS Systems

Blog WriterThe Hacker News - Original news source is thehackernews.com

A popular malware known for stealing sensitive information from Windows machines has evolved into a new strain capable of also targeting Apple’s macOS operating system. The upgraded malware, dubbed “XLoader,” is a successor to another well-known Windows-based info stealer called …

Several New Critical Flaws Affect CODESYS Industrial Automation Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Wednesday disclosed multiple security vulnerabilities impacting CODESYS automation software and the WAGO programmable logic controller (PLC) platform that could be remotely exploited to take control of a company’s cloud operational technology (OT) infrastructure. The flaws can be …

[eBook] A Guide to Stress-Free Cybersecurity for Lean IT Security Teams

Blog WriterThe Hacker News - Original news source is thehackernews.com

Today’s cybersecurity landscape is enough to make any security team concerned. The rapid evolution and increased danger of attack tactics have put even the largest corporations and governments at heightened risk. If the most elite security teams can’t prevent these …

New Windows and Linux Flaws Give Attackers Highest System Privileges

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft’s Windows 10 and the upcoming Windows 11 versions have been found vulnerable to a new local privilege escalation vulnerability that permits users with low-level permissions access Windows system files, in turn, enabling them to unmask the operating system installation …

16-Year-Old Security Bug Affects Millions of HP, Samsung, Xerox Printers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Details have emerged about a high severity security vulnerability affecting a software driver used in HP, Xerox, and Samsung printers that has remained undetected since 2005. Tracked as CVE-2021-3438 (CVSS score: 8.8), the issue concerns a buffer overflow in a print driver …

This New Malware Hides Itself Among Windows Defender Exclusions to Evade Detection

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Tuesday lifted the lid on a previously undocumented malware strain dubbed “MosaicLoader” that singles out individuals searching for cracked software as part of a global campaign. “The attackers behind MosaicLoader created a piece of malware that can …

US and Global Allies Accuse China of Massive Microsoft Exchange Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. government and its key allies, including the European Union, the U.K, and NATO, formally attributed the massive cyberattack against Microsoft Exchange email servers to state-sponsored hacking crews working affiliated with the People’s Republic of China’s Ministry of State …